2 files changed, 4 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index dbf1d40c9..f73bbd209 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,8 @@ openssh (1:5.1p1-7) UNRELEASED; urgency=low
 
   * Update config.guess and config.sub from autotools-dev 20090611.1
     (closes: #538301).
+  * Set umask to 022 in the init script as well as postinsts (closes:
+    #539030).
 
  -- Colin Watson <cjwatson@debian.org>  Fri, 24 Jul 2009 18:43:45 +0100
 
diff --git a/debian/openssh-server.init b/debian/openssh-server.init
index 75ea71525..70cded948 100644
--- a/debian/openssh-server.init
+++ b/debian/openssh-server.init
@@ -16,6 +16,8 @@ set -e
 test -x /usr/sbin/sshd || exit 0
 ( /usr/sbin/sshd -\? 2>&1 | grep -q OpenSSH ) 2>/dev/null || exit 0
 
+umask 022
+
 export SSHD_OOM_ADJUST=-17
 if test -f /etc/default/ssh; then
     . /etc/default/ssh